I just fixed this very same problem with the help of this mailing list and some
head bashing. This is what I ultimately had to do:


I put the blacklist entries in the user_prefs file in the
/home/<user>/.spamassassin folder.

Then, I had to modify my .procmailrc file to read this:


# This specifically tells spamassassin to use the user_prefs file :0fw: spamassassin.lock | /usr/bin/spamassassin -p /home/<user>/.spamassassin/user_prefs

# This tells spamassassin that if the spam score is 25 or higher,
# Then delete it completely. Of course you can have it do something
# else like send it to a spam folder.
# See http://engr.oregonstate.edu/computing/email/90 for more information
:0:
* ^X-Spam-Level:.\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*
/dev/null

Then, as the user that needs filtering I ran spamassassin -D --lint and looked
for any errors. If I didn't find any, then it was good to go. For debugging
this, you might have the spam that it catches moved to a different folder to
see if it is even testing for the USERS_IN_BLACKLIST.

Hope this helps.



Thanks,

Antonio DeLaCruz


Quoting Craig McLean <[EMAIL PROTECTED]>:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Well that looks fine to me. Would it be possible for you to post
the headers from a message that fails to trigger against the blacklist,
and the real line from local.cf that you expect it to hit? Also how is
SA being called (i.e. spamd, milter, procmail..)?

Cheers,
Craig.

Ron Shuck wrote:
| I am using SpamAssassin 3.0.2. I have entries in
| /etc/mail/spamassassin/local.cf like blacklist_from  [EMAIL PROTECTED] I
| have restarted SpamAssassin, but I have received messages from
| domain.com and USERS_IN_BLACKLIST is not one of the tests notated in the
| header. I have modified the init.d script for SpamAssassin to include
| -D, and there are no errors in the startup.
|
|
|
| Ron Shuck, CISSP, GCIA, CCSE - Managing Consultant
| Buchanan Associates - People. Process. Technology.
|
| -----Original Message-----
| From: Craig McLean [mailto:[EMAIL PROTECTED]
| Sent: Friday, April 29, 2005 10:30 AM
| To: Ron Shuck
| Cc: users@spamassassin.apache.org
| Subject: Re: Blacklist Not Working
|
| *** PGP SIGNATURE VERIFICATION ***
| *** Status:   Good Signature from Invalid Key
| *** Alert:    Please verify signer's key before trusting signature.
| *** Signer:   Craig McLean (Local Address) <[EMAIL PROTECTED]>
| (0x2D95C09E)
| *** Signed:   4/29/2005 10:29:54 AM
| *** Verified: 4/29/2005 10:30:51 AM
| *** BEGIN PGP VERIFIED MESSAGE ***
|
| Ron Shuck wrote:
| | Has anyone ever seen a situation where entries in the black_list are
| | not being used or matching?
|
| Yes.
|
| Kind Regards,
| Craig.
| P.S Perhaps you could be more specific?
|
| *** END PGP VERIFIED MESSAGE ***
|
|
|

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iD8DBQFCcle0MDDagS2VwJ4RArrVAKC9wZYMaM4hiYDqj+5j1S/TOzkQVACg/TWI
rBdvy/k9UqV4Co8cja89avE=
=WqSX
-----END PGP SIGNATURE-----




---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program.



Reply via email to